CVE-2026-70799

Oracle SDP Number Portability (component: Internal Operations) in Oracle E-Business Suite versions 12.2.3-12.2.15 is vulnerable to an easily exploitable flaw allowing unauthenticated remote attackers via HTTP to gain unauthorized access to all accessible data. CVSS 3.1 scores 7.5 (HIGH), with con...

CVE-2026-70797

...

CVE-2026-70794

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) contains a local integrity vulnerability; a low-privileged local attacker can modify or delete critical data. CVSS 3.1 scores 4.7 (Medium). Exploitation requires local infrastructure access; no exploit details are provided. Apply ...

CVE-2026-70795

...

CVE-2026-70793

...

CVE-2026-70793

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a network-accessible vulnerability exploitable by low-privileged attackers via HTTP, enabling unauthorized data read, insert, update, and delete. CVSS 3.1 scores 4.2 (Medium). No exploitation details or patches are provided in...

CVE-2026-70792

A vulnerability in the Internal Operations component of Oracle Yard Management (Oracle E-Business Suite, versions 12.2.3–12.2.15) allows a low-privileged attacker with network HTTP access to compromise the application, with successful exploitation enabling full takeover (CVSS 3.1 base score 8.8, ...

CVE-2026-70792

...

CVE-2026-70790

Oracle E-Business Suite's Telecommunications Billing Integrator (component: Internal Operations), versions 12.2.3–12.2.15, is affected by an easily exploitable, unauthenticated network-based flaw requiring user interaction that allows unauthorized integrity compromise of all accessible data; no p...

CVE-2026-70789

...

CVE-2026-70787

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has an easily exploitable HTTP-based flaw allowing low-privilege network attackers to fully compromise the server (CVSS 8.8 HIGH, all CIA impacts). No in-the-wild exploitation is reported. Oracle's August 2026 security alert (http...

CVE-2026-70785

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity vulnerability exploitable via HTTP by an unauthenticated network attacker with high attack complexity, enabling unauthorized read access to a subset of application data. No exploitation evidence or patch details...

CVE-2026-70784

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a medium-severity (CVSS 5.3) local vulnerability requiring high complexity and low privileges, allowing unauthorized data modification and partial read access. No exploitation or patch details are provided; monitoring Oracle's...

CVE-2026-70782

...

CVE-2026-70778

CVE-2026-70778 affects Oracle Customer Care (Internal Operations component) in Oracle E-Business Suite versions 12.2.3-12.2.15. A low-privileged attacker with network HTTP access can trigger unauthorized creation, deletion, or modification of critical data, with scope change potentially impacting...

CVE-2026-70777

Oracle iSupplier Portal (component Internal Operations) in E-Business Suite 12.2.3–12.2.15 has an easily exploitable, unauthenticated network vulnerability (CVSS 7.5) allowing full disclosure of all accessible data. Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts/cspuaug...

CVE-2026-70774

CVE-2026-70774 affects the Oracle Warehouse Management component (Internal Operations) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to perform unauthorized creation, deletion, or modification o...

CVE-2026-70774

...

CVE-2026-70776

Oracle Hyperion Financial Reporting Server (version 11.2.25.0.000) has a low-severity, hard-to-exploit integrity flaw exploitable via HTTP by a low-privileged attacker requiring human interaction. Impact is limited to unauthorized update/insert/delete of some accessible data; no exploit code is p...

CVE-2026-70773

A HIGH severity (CVSS 8.2) vulnerability in Oracle E-Business Suite's Knowledge Integration component (versions 12.2.3–12.2.15) allows unauthenticated remote attackers via HTTP to read critical data and perform unauthorized update/insert/delete operations. Oracle has released patches in the Augus...